Commscope Ruckus Zoneflex R500 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Commscope Ruckus Zoneflex R500, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2020-7983commscoperuckus_zoneflex_r500_firmware
EPSS score
0.62%
A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.8.8CVE-2020-8830commscoperuckus_zoneflex_r500_firmware
EPSS score
0.51%
CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.6.1CVE-2020-8033commscoperuckus_zoneflex_r500_firmware
EPSS score
0.70%
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.